Re: [hobbit] Problem with LOG test

[David Gore <David.Gore (at) VerizonBusiness.com>]

Olivier Boyaval wrote:
> David Gore a écrit :
> > Try this:
> >
> > [agecanonix]
> > log:/var/log/messages:10240
> > trigger WARNING|ERROR
> > log:/home/sirt/log/alarm_tina.log:10240
> > trigger major|critical
> >
> > I do not think '%' (pcre) is supported in this file.
> I have tested with "trigger major|critical" and "trigger Major|Critical" 
> and "trigger Critical" and "trigger critical"
>
> that doesn't run :-(
>
> Olivier

Login to the client host, agecanonix and look for these files:

cd ~/client/tmp && ls -al *status *cfg

Then you may want to try what you see in the .cfg by hand.  You should 
see something like this in the .cfg file:

log:/var/adm/messages:10240
trigger WARNING|ERROR
log:/home/sirt/log/alarm_tina.log:10240
trigger major|critical

Which should mirror your config.  Then try grepping by hand to see if 
you get what you want:

egrep -ei 'WARNING|ERROR' /var/adm/messages

And you are using Hobbit 4.2.0, if not then you need to upgrade.